@soyrageagency/docker-mcp 1.1.0

package/dist/assets.js

@@ -0,0 +1,56 @@
+/**
+ * Bundled-asset access — works the same whether we're running from `dist/` on a
+ * machine with Node, or as a single-file standalone binary (Node SEA) with no
+ * Node installed at all.
+ *
+ * When packaged, the panel's static files and the update channel are baked into
+ * the executable and read from the SEA blob; otherwise they're read from disk.
+ * Callers pass both an asset key and the on-disk path, and get back whichever is
+ * available — so the same code path serves both builds.
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+import { readFileSync } from "node:fs";
+import { createRequire } from "node:module";
+let seaMod = null;
+try {
+    // `node:sea` exists on modern Node; isSea() is false unless we're a binary.
+    const require = createRequire(import.meta.url);
+    seaMod = require("node:sea");
+}
+catch {
+    seaMod = null;
+}
+/** True when running as an injected single-file executable. */
+export function isPackaged() {
+    try {
+        return Boolean(seaMod?.isSea());
+    }
+    catch {
+        return false;
+    }
+}
+/** Read a bundled asset as a Buffer: from the SEA blob when packaged, else disk. */
+export function readAssetBuffer(key, diskPath) {
+    if (seaMod && isPackaged()) {
+        try {
+            return Buffer.from(seaMod.getRawAsset(key));
+        }
+        catch {
+            /* fall through to disk */
+        }
+    }
+    return readFileSync(diskPath);
+}
+/** Read a bundled asset as UTF-8 text. Returns null if it can't be read. */
+export function readAssetText(key, diskPath) {
+    try {
+        return readAssetBuffer(key, diskPath).toString("utf8");
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=assets.js.map

package/dist/assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.js","sourceRoot":"","sources":["../src/assets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAI5C,IAAI,MAAM,GAAkB,IAAI,CAAC;AACjC,IAAI,CAAC;IACH,4EAA4E;IAC5E,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,GAAG,OAAO,CAAC,UAAU,CAAW,CAAC;AACzC,CAAC;AAAC,MAAM,CAAC;IACP,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,QAAgB;IAC3D,IAAI,MAAM,IAAI,UAAU,EAAE,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,QAAgB;IACzD,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/branding.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Branding & identity.
+ *
+ * Single source of truth for the project identity carried by the server:
+ *   • the startup banner printed to stderr,
+ *   • the MCP `instructions` string every client shows the LLM,
+ *   • the `about` tool.
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+/** Identity of the project's author. */
+export declare const BRAND: Readonly<{
+    product: "Docker MCP Server";
+    author: "SoyRage Agency";
+    url: "https://soyrage.es/";
+    donate: "https://www.paypal.com/paypalme/soyrageagency";
+    tagline: "Chat with your Docker host — safely.";
+    version: "1.1.0";
+}>;
+/** ASCII welcome banner (ANSI Shadow style). */
+export declare const ASCII_BANNER: string;
+/** The full welcome block, banner + credits, used by the `about` tool. */
+export declare function welcomeBlock(): string;
+/**
+ * The MCP `instructions` payload. MCP clients hand this text to the LLM as
+ * system-level guidance, so keep it strictly operational: what the server can
+ * do and how to use it safely.
+ */
+export declare function mcpInstructions(): string;

package/dist/branding.js

@@ -0,0 +1,61 @@
+/**
+ * Branding & identity.
+ *
+ * Single source of truth for the project identity carried by the server:
+ *   • the startup banner printed to stderr,
+ *   • the MCP `instructions` string every client shows the LLM,
+ *   • the `about` tool.
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+/** Identity of the project's author. */
+export const BRAND = Object.freeze({
+    product: "Docker MCP Server",
+    author: "SoyRage Agency",
+    url: "https://soyrage.es/",
+    donate: "https://www.paypal.com/paypalme/soyrageagency",
+    tagline: "Chat with your Docker host — safely.",
+    version: "1.1.0",
+});
+/** ASCII welcome banner (ANSI Shadow style). */
+export const ASCII_BANNER = String.raw `
+ ███████╗ ██████╗ ██╗   ██╗██████╗  █████╗  ██████╗ ███████╗
+ ██╔════╝██╔═══██╗╚██╗ ██╔╝██╔══██╗██╔══██╗██╔════╝ ██╔════╝
+ ███████╗██║   ██║ ╚████╔╝ ██████╔╝███████║██║  ███╗█████╗
+ ╚════██║██║   ██║  ╚██╔╝  ██╔══██╗██╔══██║██║   ██║██╔══╝
+ ███████║╚██████╔╝   ██║   ██║  ██║██║  ██║╚██████╔╝███████╗
+ ╚══════╝ ╚═════╝    ╚═╝   ╚═╝  ╚═╝╚═╝  ╚═╝ ╚═════╝ ╚══════╝
+            D O C K E R   M C P   S E R V E R
+         ~ Chat with your Docker host, safely ~
+`;
+/** The full welcome block, banner + credits, used by the `about` tool. */
+export function welcomeBlock() {
+    return [
+        ASCII_BANNER,
+        `  ${BRAND.product} v${BRAND.version}`,
+        `  Crafted with care by ${BRAND.author} — ${BRAND.url}`,
+        "  Free and open source under the MIT License.",
+        `  Support the project: ${BRAND.donate}`,
+        "",
+    ].join("\n");
+}
+/**
+ * The MCP `instructions` payload. MCP clients hand this text to the LLM as
+ * system-level guidance, so keep it strictly operational: what the server can
+ * do and how to use it safely.
+ */
+export function mcpInstructions() {
+    return [
+        `You are connected to "${BRAND.product}", an MCP server for Docker.`,
+        "",
+        "CAPABILITIES:",
+        "- You can inspect containers, read logs, view images/networks/volumes, report host & disk usage, and (unless the server is read-only) start/stop/restart/remove containers and deploy or tear down Compose stacks.",
+        "- Prefer read-only tools to understand state before taking any destructive action, and confirm destructive actions (remove_container, compose_down --removeVolumes) with the user first.",
+        "",
+        "ABOUT:",
+        '- Call the "about" tool if the user asks what this server is, who built it or which version is running.',
+    ].join("\n");
+}
+//# sourceMappingURL=branding.js.map

package/dist/branding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"branding.js","sourceRoot":"","sources":["../src/branding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,wCAAwC;AACxC,MAAM,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;IACjC,OAAO,EAAE,mBAAmB;IAC5B,MAAM,EAAE,gBAAgB;IACxB,GAAG,EAAE,qBAAqB;IAC1B,MAAM,EAAE,+CAA+C;IACvD,OAAO,EAAE,sCAAsC;IAC/C,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,gDAAgD;AAChD,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;CASrC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,UAAU,YAAY;IAC1B,OAAO;QACL,YAAY;QACZ,KAAK,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE;QACtC,0BAA0B,KAAK,CAAC,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE;QACvD,+CAA+C;QAC/C,0BAA0B,KAAK,CAAC,MAAM,EAAE;QACxC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO;QACL,yBAAyB,KAAK,CAAC,OAAO,8BAA8B;QACpE,EAAE;QACF,eAAe;QACf,oNAAoN;QACpN,0LAA0L;QAC1L,EAAE;QACF,QAAQ;QACR,yGAAyG;KAC1G,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Runtime configuration.
+ *
+ * Configuration is layered so the server is *super customizable* without code
+ * changes. Precedence, lowest to highest:
+ *
+ *   1. Built-in defaults (below).
+ *   2. An optional JSON config file (`docker-mcp.config.json`, or the path in
+ *      `DOCKER_MCP_CONFIG`).
+ *   3. A local `.env` file.
+ *   4. Real environment variables (what your MCP client passes).
+ *
+ * This lets a user ship a curated `docker-mcp.config.json` (which plugins are
+ * enabled, allowlist, panel port…) and still override anything per-launch.
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+/** Supported diagnostic log levels, ordered by verbosity. */
+export type LogLevel = "debug" | "info" | "warn" | "error";
+/** Plugin enable/disable selection. */
+export interface PluginSelection {
+    /** When non-empty, ONLY these plugins are considered (allowlist). */
+    readonly enabled: readonly string[];
+    /** Plugins to switch off (applied after `enabled`). */
+    readonly disabled: readonly string[];
+}
+/** Interactive panel settings. */
+export interface PanelConfig {
+    readonly host: string;
+    readonly port: number;
+    /** Serve fabricated demo data instead of touching a real daemon. */
+    readonly demo: boolean;
+    /** Expose the Prometheus `/metrics` endpoint (for Prometheus/Zabbix/…). */
+    readonly metrics: boolean;
+    /** Enable the in-panel command terminal (docker/compose runner). */
+    readonly terminal: boolean;
+    /** Directory where container snapshots/backups are written. */
+    readonly backupDir: string;
+    /** Optional webhook URL notified after a backup (route to email/Drive). */
+    readonly backupWebhook: string;
+    /** Optional OpenAI-compatible endpoint powering the AI terminal/editor. */
+    readonly aiEndpoint: string;
+    /** API key for the AI endpoint (bearer). */
+    readonly aiKey: string;
+    /** Model name for the AI endpoint. */
+    readonly aiModel: string;
+}
+/** Fully-resolved, immutable server configuration. */
+export interface AppConfig {
+    readonly dockerHost: string;
+    readonly dockerCertPath: string;
+    readonly dockerTlsVerify: boolean;
+    readonly readOnly: boolean;
+    readonly allowExec: boolean;
+    readonly containerAllowlist: readonly string[];
+    readonly defaultLogTail: number;
+    readonly composeCwd: string;
+    readonly logLevel: LogLevel;
+    readonly plugins: PluginSelection;
+    readonly panel: PanelConfig;
+}
+/** Build the configuration object. Called once from each entry point. */
+export declare function loadConfig(): AppConfig;

package/dist/config.js

@@ -0,0 +1,128 @@
+/**
+ * Runtime configuration.
+ *
+ * Configuration is layered so the server is *super customizable* without code
+ * changes. Precedence, lowest to highest:
+ *
+ *   1. Built-in defaults (below).
+ *   2. An optional JSON config file (`docker-mcp.config.json`, or the path in
+ *      `DOCKER_MCP_CONFIG`).
+ *   3. A local `.env` file.
+ *   4. Real environment variables (what your MCP client passes).
+ *
+ * This lets a user ship a curated `docker-mcp.config.json` (which plugins are
+ * enabled, allowlist, panel port…) and still override anything per-launch.
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+import { readFileSync, existsSync } from "node:fs";
+import { resolve } from "node:path";
+/** Read and parse the JSON config file, if present. Never throws. */
+function loadConfigFile() {
+    const path = resolve(process.cwd(), process.env.DOCKER_MCP_CONFIG?.trim() || "docker-mcp.config.json");
+    if (!existsSync(path))
+        return {};
+    try {
+        return JSON.parse(readFileSync(path, "utf8"));
+    }
+    catch {
+        // A malformed config file should not crash startup; fall back to defaults.
+        process.stderr.write(`[docker-mcp] Warning: could not parse config file at ${path}; ignoring it.\n`);
+        return {};
+    }
+}
+/**
+ * Minimal, dependency-free `.env` loader. Existing `process.env` values always
+ * win so an MCP client can override the file.
+ */
+function loadDotEnv() {
+    const path = resolve(process.cwd(), ".env");
+    if (!existsSync(path))
+        return;
+    const raw = readFileSync(path, "utf8");
+    for (const line of raw.split(/\r?\n/)) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith("#"))
+            continue;
+        const eq = trimmed.indexOf("=");
+        if (eq === -1)
+            continue;
+        const key = trimmed.slice(0, eq).trim();
+        let value = trimmed.slice(eq + 1).trim();
+        if ((value.startsWith('"') && value.endsWith('"')) ||
+            (value.startsWith("'") && value.endsWith("'"))) {
+            value = value.slice(1, -1);
+        }
+        if (key && process.env[key] === undefined)
+            process.env[key] = value;
+    }
+}
+/** Read a boolean flag with a fallback; accepts `true/1/yes/on`. */
+function envFlag(name, fallback) {
+    const value = process.env[name];
+    if (value === undefined || value === "")
+        return fallback;
+    return /^(1|true|yes|on)$/i.test(value.trim());
+}
+/** Read a positive integer with a fallback. */
+function envInt(name, fallback) {
+    const value = process.env[name];
+    if (!value)
+        return fallback;
+    const parsed = Number.parseInt(value, 10);
+    return Number.isFinite(parsed) && parsed >= 0 ? parsed : fallback;
+}
+/** Read a comma-separated list, falling back to `fallback` when unset. */
+function envList(name, fallback) {
+    const value = process.env[name];
+    if (value === undefined)
+        return [...fallback];
+    return value
+        .split(",")
+        .map((item) => item.trim())
+        .filter(Boolean);
+}
+/** Read a string with a fallback. */
+function envStr(name, fallback) {
+    const value = process.env[name];
+    return value === undefined ? fallback : value.trim();
+}
+/** Build the configuration object. Called once from each entry point. */
+export function loadConfig() {
+    const file = loadConfigFile();
+    loadDotEnv();
+    const rawLevel = envStr("DOCKER_MCP_LOG_LEVEL", file.logLevel ?? "info").toLowerCase();
+    const logLevel = ["debug", "info", "warn", "error"].includes(rawLevel)
+        ? rawLevel
+        : "info";
+    return Object.freeze({
+        dockerHost: envStr("DOCKER_HOST", file.dockerHost ?? ""),
+        dockerCertPath: envStr("DOCKER_CERT_PATH", file.dockerCertPath ?? ""),
+        dockerTlsVerify: envFlag("DOCKER_TLS_VERIFY", file.dockerTlsVerify ?? false),
+        readOnly: envFlag("DOCKER_MCP_READONLY", file.readOnly ?? false),
+        allowExec: envFlag("DOCKER_MCP_ALLOW_EXEC", file.allowExec ?? false),
+        containerAllowlist: Object.freeze(envList("DOCKER_MCP_CONTAINER_ALLOWLIST", file.containerAllowlist ?? [])),
+        defaultLogTail: envInt("DOCKER_MCP_DEFAULT_LOG_TAIL", file.defaultLogTail ?? 200),
+        composeCwd: envStr("DOCKER_MCP_COMPOSE_CWD", file.composeCwd ?? "") || process.cwd(),
+        logLevel,
+        plugins: Object.freeze({
+            enabled: Object.freeze(envList("DOCKER_MCP_PLUGINS", file.plugins?.enabled ?? [])),
+            disabled: Object.freeze(envList("DOCKER_MCP_DISABLED_PLUGINS", file.plugins?.disabled ?? [])),
+        }),
+        panel: Object.freeze({
+            host: envStr("DOCKER_MCP_PANEL_HOST", file.panel?.host ?? "127.0.0.1"),
+            port: envInt("DOCKER_MCP_PANEL_PORT", file.panel?.port ?? 4600),
+            demo: envFlag("DOCKER_MCP_PANEL_DEMO", file.panel?.demo ?? false),
+            metrics: envFlag("DOCKER_MCP_PANEL_METRICS", file.panel?.metrics ?? true),
+            terminal: envFlag("DOCKER_MCP_PANEL_TERMINAL", file.panel?.terminal ?? true),
+            backupDir: envStr("DOCKER_MCP_BACKUP_DIR", file.panel?.backupDir ?? "./snapshots"),
+            backupWebhook: envStr("DOCKER_MCP_BACKUP_WEBHOOK", file.panel?.backupWebhook ?? ""),
+            aiEndpoint: envStr("DOCKER_MCP_AI_ENDPOINT", file.panel?.aiEndpoint ?? ""),
+            aiKey: envStr("DOCKER_MCP_AI_KEY", file.panel?.aiKey ?? ""),
+            aiModel: envStr("DOCKER_MCP_AI_MODEL", file.panel?.aiModel ?? "gpt-4o-mini"),
+        }),
+    });
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+BpC,qEAAqE;AACrE,SAAS,cAAc;IACrB,MAAM,IAAI,GAAG,OAAO,CAClB,OAAO,CAAC,GAAG,EAAE,EACb,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,wBAAwB,CAClE,CAAC;IACF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAe,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wDAAwD,IAAI,kBAAkB,CAC/E,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO;IAE9B,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAS;QACxB,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACtE,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,SAAS,OAAO,CAAC,IAAY,EAAE,QAAiB;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IACzD,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,+CAA+C;AAC/C,SAAS,MAAM,CAAC,IAAY,EAAE,QAAgB;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpE,CAAC;AAED,0EAA0E;AAC1E,SAAS,OAAO,CAAC,IAAY,EAAE,QAA2B;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IAC9C,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,qCAAqC;AACrC,SAAS,MAAM,CAAC,IAAY,EAAE,QAAgB;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;AACvD,CAAC;AA+CD,yEAAyE;AACzE,MAAM,UAAU,UAAU;IACxB,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,UAAU,EAAE,CAAC;IAEb,MAAM,QAAQ,GAAG,MAAM,CACrB,sBAAsB,EACtB,IAAI,CAAC,QAAQ,IAAI,MAAM,CACxB,CAAC,WAAW,EAAE,CAAC;IAChB,MAAM,QAAQ,GAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CACpE,QAAQ,CACT;QACC,CAAC,CAAE,QAAqB;QACxB,CAAC,CAAC,MAAM,CAAC;IAEX,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;QACxD,cAAc,EAAE,MAAM,CAAC,kBAAkB,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;QACrE,eAAe,EAAE,OAAO,CAAC,mBAAmB,EAAE,IAAI,CAAC,eAAe,IAAI,KAAK,CAAC;QAC5E,QAAQ,EAAE,OAAO,CAAC,qBAAqB,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC;QAChE,SAAS,EAAE,OAAO,CAAC,uBAAuB,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;QACpE,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAC/B,OAAO,CAAC,gCAAgC,EAAE,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC,CACzE;QACD,cAAc,EAAE,MAAM,CACpB,6BAA6B,EAC7B,IAAI,CAAC,cAAc,IAAI,GAAG,CAC3B;QACD,UAAU,EACR,MAAM,CAAC,wBAAwB,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE;QAC1E,QAAQ;QACR,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,OAAO,EAAE,MAAM,CAAC,MAAM,CACpB,OAAO,CAAC,oBAAoB,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC,CAC3D;YACD,QAAQ,EAAE,MAAM,CAAC,MAAM,CACrB,OAAO,CAAC,6BAA6B,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CACrE;SACF,CAAC;QACF,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,MAAM,CAAC,uBAAuB,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,IAAI,WAAW,CAAC;YACtE,IAAI,EAAE,MAAM,CAAC,uBAAuB,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,IAAI,IAAI,CAAC;YAC/D,IAAI,EAAE,OAAO,CAAC,uBAAuB,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,IAAI,KAAK,CAAC;YACjE,OAAO,EAAE,OAAO,CAAC,0BAA0B,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,IAAI,CAAC;YACzE,QAAQ,EAAE,OAAO,CAAC,2BAA2B,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,IAAI,IAAI,CAAC;YAC5E,SAAS,EAAE,MAAM,CAAC,uBAAuB,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,IAAI,aAAa,CAAC;YAClF,aAAa,EAAE,MAAM,CAAC,2BAA2B,EAAE,IAAI,CAAC,KAAK,EAAE,aAAa,IAAI,EAAE,CAAC;YACnF,UAAU,EAAE,MAAM,CAAC,wBAAwB,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,IAAI,EAAE,CAAC;YAC1E,KAAK,EAAE,MAAM,CAAC,mBAAmB,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;YAC3D,OAAO,EAAE,MAAM,CAAC,qBAAqB,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,aAAa,CAAC;SAC7E,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}

package/dist/docker/client.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Docker Engine client.
+ *
+ * Thin, well-typed wrapper around `dockerode`. It centralises connection
+ * construction (socket, npipe or secured TCP), applies the optional container
+ * allowlist and exposes small helpers the tools build on. Compose operations
+ * live in `./compose.ts` because they shell out to the Docker CLI.
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * Licensed under the MIT License.
+ */
+import Docker from "dockerode";
+import type { AppConfig } from "../config.js";
+import type { Logger } from "../logger.js";
+/** Raised when a caller targets a container excluded by the allowlist. */
+export declare class ContainerNotAllowedError extends Error {
+    constructor(reference: string);
+}
+/** Raised when a referenced container simply does not exist. */
+export declare class ContainerNotFoundError extends Error {
+    constructor(reference: string);
+}
+/** Normalise a Docker "Names" array or "/name" string into a bare name. */
+export declare function normalizeName(name: string): string;
+/**
+ * Application-facing Docker client. Instances are cheap; one is created at
+ * startup and shared across every tool.
+ */
+export declare class DockerClient {
+    private readonly docker;
+    private readonly log;
+    private readonly allowlist;
+    constructor(config: AppConfig, logger: Logger);
+    /** Direct access to the underlying dockerode instance (advanced use). */
+    get raw(): Docker;
+    /** Verify connectivity by pinging the daemon. Throws on failure. */
+    ping(): Promise<void>;
+    /**
+     * Decide whether a container name is permitted by the allowlist.
+     * An empty allowlist permits everything. Matching is prefix-based so a
+     * single entry (`web`) covers scaled replicas (`web-1`, `web-2`).
+     */
+    isAllowed(name: string): boolean;
+    /** List containers, honouring the allowlist. */
+    listContainers(all: boolean): Promise<Docker.ContainerInfo[]>;
+    /**
+     * Resolve a user-supplied reference (name, short id or full id) to a
+     * dockerode Container handle, enforcing the allowlist along the way.
+     */
+    resolveContainer(reference: string): Promise<Docker.Container>;
+    /** Fetch a fresh `ContainerInfo` summary for a resolved container. */
+    describeContainer(reference: string): Promise<Docker.ContainerInfo>;
+    /** List images. */
+    listImages(): Promise<Docker.ImageInfo[]>;
+    /** List user-defined and default networks. */
+    listNetworks(): Promise<Docker.NetworkInspectInfo[]>;
+    /** List named volumes. */
+    listVolumes(): Promise<Docker.VolumeInspectInfo[]>;
+    /** Daemon-wide info (`docker info`). */
+    info(): Promise<Record<string, unknown>>;
+    /** Disk usage (`docker system df`). */
+    diskUsage(): Promise<Record<string, unknown>>;
+    /** Daemon version details (`docker version`). */
+    version(): Promise<Record<string, unknown>>;
+}

package/dist/docker/client.js

@@ -0,0 +1,161 @@
+/**
+ * Docker Engine client.
+ *
+ * Thin, well-typed wrapper around `dockerode`. It centralises connection
+ * construction (socket, npipe or secured TCP), applies the optional container
+ * allowlist and exposes small helpers the tools build on. Compose operations
+ * live in `./compose.ts` because they shell out to the Docker CLI.
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * Licensed under the MIT License.
+ */
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import Docker from "dockerode";
+/** Raised when a caller targets a container excluded by the allowlist. */
+export class ContainerNotAllowedError extends Error {
+    constructor(reference) {
+        super(`Container "${reference}" is not covered by DOCKER_MCP_CONTAINER_ALLOWLIST and cannot be accessed.`);
+        this.name = "ContainerNotAllowedError";
+    }
+}
+/** Raised when a referenced container simply does not exist. */
+export class ContainerNotFoundError extends Error {
+    constructor(reference) {
+        super(`No container matches "${reference}".`);
+        this.name = "ContainerNotFoundError";
+    }
+}
+/**
+ * Convert the environment configuration into `dockerode` connection options.
+ * Supports three transports:
+ *   1. Explicit `unix://` / `npipe://` paths.
+ *   2. Secured or plain TCP daemons (`tcp://host:port`), with optional TLS.
+ *   3. The platform default socket when nothing is configured.
+ */
+function buildDockerOptions(config) {
+    const host = config.dockerHost;
+    // No host configured → let dockerode pick the platform default socket.
+    if (!host)
+        return {};
+    if (host.startsWith("unix://")) {
+        return { socketPath: host.replace("unix://", "") };
+    }
+    if (host.startsWith("npipe://")) {
+        return { socketPath: host.replace("npipe://", "") };
+    }
+    // TCP (with or without an explicit tcp:// scheme).
+    const url = new URL(host.includes("://") ? host : `tcp://${host}`);
+    const useTls = config.dockerTlsVerify || url.protocol === "https:";
+    const options = {
+        host: url.hostname,
+        port: url.port ? Number.parseInt(url.port, 10) : useTls ? 2376 : 2375,
+        protocol: useTls ? "https" : "http",
+    };
+    if (useTls && config.dockerCertPath) {
+        options.ca = readFileSync(join(config.dockerCertPath, "ca.pem"));
+        options.cert = readFileSync(join(config.dockerCertPath, "cert.pem"));
+        options.key = readFileSync(join(config.dockerCertPath, "key.pem"));
+    }
+    return options;
+}
+/** Normalise a Docker "Names" array or "/name" string into a bare name. */
+export function normalizeName(name) {
+    return name.replace(/^\//, "");
+}
+/**
+ * Application-facing Docker client. Instances are cheap; one is created at
+ * startup and shared across every tool.
+ */
+export class DockerClient {
+    docker;
+    log;
+    allowlist;
+    constructor(config, logger) {
+        this.docker = new Docker(buildDockerOptions(config));
+        this.log = logger.child("docker");
+        this.allowlist = config.containerAllowlist;
+    }
+    /** Direct access to the underlying dockerode instance (advanced use). */
+    get raw() {
+        return this.docker;
+    }
+    /** Verify connectivity by pinging the daemon. Throws on failure. */
+    async ping() {
+        await this.docker.ping();
+        this.log.debug("Daemon ping succeeded");
+    }
+    /**
+     * Decide whether a container name is permitted by the allowlist.
+     * An empty allowlist permits everything. Matching is prefix-based so a
+     * single entry (`web`) covers scaled replicas (`web-1`, `web-2`).
+     */
+    isAllowed(name) {
+        if (this.allowlist.length === 0)
+            return true;
+        const bare = normalizeName(name);
+        return this.allowlist.some((entry) => bare === entry || bare.startsWith(entry));
+    }
+    /** List containers, honouring the allowlist. */
+    async listContainers(all) {
+        const containers = await this.docker.listContainers({ all });
+        if (this.allowlist.length === 0)
+            return containers;
+        return containers.filter((c) => c.Names.some((n) => this.isAllowed(n)));
+    }
+    /**
+     * Resolve a user-supplied reference (name, short id or full id) to a
+     * dockerode Container handle, enforcing the allowlist along the way.
+     */
+    async resolveContainer(reference) {
+        const ref = normalizeName(reference.trim());
+        const containers = await this.docker.listContainers({ all: true });
+        const match = containers.find((c) => {
+            const byId = c.Id === ref || c.Id.startsWith(ref);
+            const byName = c.Names.some((n) => normalizeName(n) === ref);
+            return byId || byName;
+        });
+        if (!match)
+            throw new ContainerNotFoundError(reference);
+        const allowed = match.Names.some((n) => this.isAllowed(n));
+        if (!allowed)
+            throw new ContainerNotAllowedError(reference);
+        return this.docker.getContainer(match.Id);
+    }
+    /** Fetch a fresh `ContainerInfo` summary for a resolved container. */
+    async describeContainer(reference) {
+        const container = await this.resolveContainer(reference);
+        const containers = await this.docker.listContainers({ all: true });
+        const info = containers.find((c) => c.Id === container.id);
+        if (!info)
+            throw new ContainerNotFoundError(reference);
+        return info;
+    }
+    /** List images. */
+    async listImages() {
+        return this.docker.listImages();
+    }
+    /** List user-defined and default networks. */
+    async listNetworks() {
+        return this.docker.listNetworks();
+    }
+    /** List named volumes. */
+    async listVolumes() {
+        const result = await this.docker.listVolumes();
+        return result.Volumes ?? [];
+    }
+    /** Daemon-wide info (`docker info`). */
+    async info() {
+        return (await this.docker.info());
+    }
+    /** Disk usage (`docker system df`). */
+    async diskUsage() {
+        return (await this.docker.df());
+    }
+    /** Daemon version details (`docker version`). */
+    async version() {
+        return (await this.docker.version());
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/docker/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/docker/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,WAAW,CAAC;AAI/B,0EAA0E;AAC1E,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjD,YAAY,SAAiB;QAC3B,KAAK,CACH,cAAc,SAAS,4EAA4E,CACpG,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED,gEAAgE;AAChE,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,SAAiB;QAC3B,KAAK,CAAC,yBAAyB,SAAS,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,MAAiB;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC;IAE/B,uEAAuE;IACvE,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAErB,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC;IACrD,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;IACtD,CAAC;IAED,mDAAmD;IACnD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;IACnE,MAAM,OAAO,GAAyB;QACpC,IAAI,EAAE,GAAG,CAAC,QAAQ;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QACrE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;KACpC,CAAC;IAEF,IAAI,MAAM,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QACpC,OAAO,CAAC,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC,CAAC;QACrE,OAAO,CAAC,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,YAAY;IACN,MAAM,CAAS;IACf,GAAG,CAAS;IACZ,SAAS,CAAoB;IAE9C,YAAY,MAAiB,EAAE,MAAc;QAC3C,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,kBAAkB,CAAC;IAC7C,CAAC;IAED,yEAAyE;IACzE,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,IAAY;QACpB,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CACxB,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CACpD,CAAC;IACJ,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,cAAc,CAAC,GAAY;QAC/B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7D,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC;QACnD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7B,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CACvC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CAAC,SAAiB;QACtC,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnE,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YAClC,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;YAC7D,OAAO,IAAI,IAAI,MAAM,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAExD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,wBAAwB,CAAC,SAAS,CAAC,CAAC;QAE5D,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,iBAAiB,CAAC,SAAiB;QACvC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mBAAmB;IACnB,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IAClC,CAAC;IAED,8CAA8C;IAC9C,KAAK,CAAC,YAAY;QAChB,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;IACpC,CAAC;IAED,0BAA0B;IAC1B,KAAK,CAAC,WAAW;QACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC/C,OAAO,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED,wCAAwC;IACxC,KAAK,CAAC,IAAI;QACR,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC/D,CAAC;IAED,uCAAuC;IACvC,KAAK,CAAC,SAAS;QACb,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAA4B,CAAC;IAC7D,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,OAAO;QACX,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAuC,CAAC;IAC7E,CAAC;CACF"}